Lack of escaping leads to an XSS vulnerability in the generic image output layout.
CVE-2026-48953
Lack of escaping leads to an XSS vulnerability in the generic image output layout.
2026-07-09 归档
今日共收录 1410 条安全情报，包含 455 个 CVE，561 篇安全通告，以及 105 篇研究论文。
← 返回归档列表Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
CVE-2026-48952
Lack of escaping leads to an XSS vulnerability in the update list view of com_installer.
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
CVE-2026-48951
Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components.
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
CVE-2026-48950
Lack of escaping leads to an XSS vulnerability in the file management view of com_templates.
Lack of validation leads to an XSS vulnerability in the MFA management views.
CVE-2026-48949
Lack of validation leads to an XSS vulnerability in the MFA management views.
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
CVE-2026-48948
An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible.
An improper access check allows privileged users to overwrite media files without editing permissions.
CVE-2026-48947
An improper access check allows privileged users to overwrite media files without editing permissions.
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physic...
CVE-2026-57851
MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allo
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arb...
CVE-2026-23698
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import featur
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containin...
CVE-2026-23697
Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources ...
CVE-2026-14904
AWS Research and Engineering Studio (RES) is an open-source solution that enables researchers and engineers to create an
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on Windows, Linux and Kubernetes. A remote, unauthorized att...
CVE-2026-13020
A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earlier on
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined configuration to allow unescaped characters in URL with embedde...
CVE-2025-12799
A flaw was found in Jastow. Jastow is vulnerable to Cross-Site Scripting (XSS) attack. If using a set of combined config
决赛直播｜第四届阿里CTF安全挑战赛
该文章为第四届阿里CTF安全挑战赛的决赛直播通知，发布于阿里云先知社区。内容主要介绍比赛时间、观看方式、参赛队伍等信息，不涉及任何实际的网络安全威胁、漏洞利用、恶意软件或攻击活动。文章属于社区活动公告性质，无安全情报价值。
抢先加入AI时代顶尖安全团队！阿里云2027届实习生招聘来了！
本文为阿里云2027届实习生招聘通知，发布于先知社区。内容包含招聘岗位、要求及报名方式等，不涉及任何网络安全威胁、漏洞、攻击活动或恶意软件。无CVE、攻击组织、恶意家族等威胁情报相关信息。
Control CenterManage your security and delivery services
Control CenterManage your security and delivery services
See all Cybersecurity
See all Cybersecurity
Our Infrastructure
Our Infrastructure
从 Web 到小程序：用 AI-First 思维重构逆向调试工具
从 Web 到小程序：用 AI-First 思维重构逆向调试工具
OpenClaw安全使用实践指南
OpenClaw安全使用实践指南